last executing test programs: 5m25.465178751s ago: executing program 2 (id=309): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m25.170280947s ago: executing program 2 (id=313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000a00)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x6, 0x6, 0xfffffffb, 0x2c0000}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) 5m24.694711837s ago: executing program 2 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000004, 0x8, 0x6, 0x7, 0x8, 0x5, 0x7f}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m23.464102785s ago: executing program 2 (id=316): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYBLOB='nonumtail=0,showexec,shortname=win95,utf8=0,codepage=1250,rodir,\x00\x00\x00\x00\x00\x00\x00\x00e=lower,shortname=win95,discard,dos1xfloppy,uni_xlate=0,uni_xlate=1,shortname=mixed,iocharset=cp775,\x00'], 0x1, 0x368, &(0x7f0000000600)="$eJzs3U9om2UYAPAn+9KmHWztQRgKwqc3Qcv+4EFPHaODYS4qYepBDK5TaeqgwWB3WFYv4lHwqCcv4kEPHnYWQRFvHrw6QabiQXcbOHwlyZcmadKuE7JZ/P0O4cn7Ps/3vm/2rfn6tXn7ynKsXZiJizdv3oi5uVKUl88sx61SLEYWfVdj3OyENgDgYLiVUvyZevZZUprylACAKeu+/792ZPv5XLzz9V75ybs/ABx4xff/83vlzO3WcWkqUwIApmzs/v+jI92zoz/qLw/9VgAAcFA9/+JLz5yuRjyX53MR6++2aq1aPD3oP30x3ohGrMbxWIjbEb0Lhc5Dqft49lx15Xie5+34ZTFqnYpWLWK93ar1rhROZ936SpyIhVgs6ourjZRSdvaL6sqJvCsirra748d6qVWbicPF+D8ejtU4GXk8MFYfca66cjIvDlBb79e3I7YG9y0681+Khfj+1bgUjbgwfz5S6l/WVFeunMjzM6k6Ut+qVeLC9quw6x0QAAAAAAAAAAAAAAAAAAAAAAD4V5a2iiDPF7f3v0mD/XuWlvK+xdH9cXplxf5AW739gVIlRUp/vP1E7b0sRvYH2rk/T6tWjkP3b9kAAAAAAAAAAAAAAAAAAADwn9LcnI16o7G60dy8vDYctDeam4ciotPy5reffTUf4zl3CMrFGENdedF0ea2esn5yykZyiiDrDN5v+fTa9oyHcyrbq5g4jcruXY3GkUd+/nDQ8nDWP/Lfg5wsJi8w2zGN4WD9aG9Kd/NCXT5VBCfvkHw9pbTbca68PF4VpYjy3f/D7R2kTvDNjdcfPNU89mS35cvU89jjC+evf/Dxb2v1RmfkjsYnsxvN22mtXjyffLLtHmRD508pekFp+Ewo71W+NdpSz374/YWH3v9uf6On4Za3JuRkveV8vtHcLBX/U7pds72g07ajar5xLovYcZyZCSf/FIJjHy3Xr1356dd9JZcirg6+SNioAwAAAAAAAAAAAAAAAAAA7omhz4oXig/7zuxV9dSz058ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANw7g7//PxRsjbXsJ/irHeNdldWNZsTR+71MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+5/4JAAD//5bCao8=") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {0x5, 0x4, 0xb4e, 0x8786}, 0x54, [0x6c, 0x0, 0x6ca0, 0x665, 0x7, 0x3, 0x1, 0x8001, 0x7, 0x7, 0x34f, 0x68b, 0xdd, 0x7, 0x6, 0x1, 0x10000, 0x8, 0x4442000, 0x7, 0x5, 0x1, 0x1, 0xfff, 0x8, 0x5, 0x80, 0x7, 0x9, 0x9, 0x1, 0xfffffffb, 0xfffffff7, 0x6, 0x80000000, 0x1, 0x7f, 0x5, 0x0, 0xfffff801, 0x5, 0x8, 0x7fffffff, 0x6, 0x6, 0x2, 0x4, 0x9, 0x4, 0x0, 0xb, 0x9, 0x0, 0x4, 0x183, 0x7, 0x8, 0x6, 0x2, 0x6, 0xc, 0x7fffffff, 0x0, 0x1], [0x100, 0x6, 0xe, 0x28e, 0x3, 0x3585, 0x7f, 0x8, 0x6, 0x1fc, 0xff, 0x8000, 0x9, 0x0, 0x4, 0x5, 0x6, 0x7fff, 0x59, 0x1, 0x8, 0x6, 0x0, 0x0, 0x5284, 0x7, 0x0, 0x8, 0x4, 0x4da, 0x2f03, 0x9, 0x5, 0x4, 0x8, 0xc97, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8, 0x1, 0x7, 0x3, 0x3, 0x100, 0x80000001, 0x8001, 0x8, 0x6, 0x4, 0x6, 0x80, 0x7ff, 0x3, 0x0, 0x4, 0xce, 0x8, 0x5, 0x10000], [0x9, 0x3, 0x81, 0x6, 0x4, 0x2, 0x8, 0x8ef, 0x3ff, 0xa, 0x9, 0x8, 0x40, 0x1, 0x5, 0x66c, 0x6071, 0x2, 0x9, 0x6, 0x4, 0x5, 0x3, 0xedc, 0x6, 0x2, 0x80, 0x9, 0xd985, 0x10001, 0x6, 0x56, 0x5, 0x4, 0x1, 0x9, 0x8, 0x23, 0x3, 0x2, 0x401, 0x1, 0x3, 0xbe, 0x8001, 0x74, 0x7, 0xfffffff8, 0x7f, 0xff, 0x5cc0, 0x5, 0x0, 0xe55e, 0x3, 0x200, 0x4, 0x6a07, 0x4000000, 0xc, 0x66817538, 0x5, 0xf873, 0x7], [0x8001, 0x1, 0x308, 0x9, 0x181, 0x7, 0xc4f9, 0x5, 0x5, 0x5, 0x2, 0x43, 0x7, 0x401, 0x3, 0xffffffff, 0x7, 0x9, 0x0, 0xe2, 0x9, 0x58, 0x1, 0x0, 0x3, 0x4, 0x7, 0x7, 0x6, 0x200, 0xfe9e, 0x4, 0x7, 0xcc2, 0x0, 0x8, 0x0, 0xfffffffd, 0x8, 0x979, 0x0, 0x34, 0x0, 0x80000001, 0x8, 0x1, 0x8000, 0x5, 0x6, 0x0, 0xfffffff9, 0xfff, 0x5, 0x0, 0xa, 0x401, 0x401, 0x1, 0x4, 0x5c4e1873, 0x3, 0x5, 0xc0, 0x8]}, 0x45c) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 5m20.226001336s ago: executing program 2 (id=339): openat$kvm(0xffffffffffffff9c, 0x0, 0x101600, 0x0) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m19.216159828s ago: executing program 2 (id=335): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x3}, [], {}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0x4}], {0x10, 0x5}}, 0x3c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x6a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r8, 0xc01, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x448000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r9, 0x20, &(0x7f0000000780)={&(0x7f0000000480)=""/99, 0x63, 0x0, &(0x7f0000000680)=""/218, 0xda}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) 5m19.016094852s ago: executing program 32 (id=335): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x3}, [], {}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0x4}], {0x10, 0x5}}, 0x3c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x6a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r8, 0xc01, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x448000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r9, 0x20, &(0x7f0000000780)={&(0x7f0000000480)=""/99, 0x63, 0x0, &(0x7f0000000680)=""/218, 0xda}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) 4m8.841793737s ago: executing program 1 (id=641): bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ptrace(0x10, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) ptrace$pokeuser(0x6, 0x0, 0xc, 0x8) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 4m5.241285636s ago: executing program 1 (id=655): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@nodelalloc}]}, 0x2, 0x50c, &(0x7f0000001640)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000001c0)={[{@sysvgroups}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) 4m4.769503587s ago: executing program 1 (id=661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x3}, [], {}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0x4}], {0x10, 0x5}}, 0x3c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x448000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r8, 0x20, &(0x7f0000000780)={&(0x7f0000000480)=""/99, 0x63, 0x0, &(0x7f0000000680)=""/218, 0xda}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) 4m3.672251541s ago: executing program 1 (id=664): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xc80, &(0x7f0000000080)=ANY=[@ANYBLOB='tr']) syz_clone(0x20000400, 0x0, 0x3b54, 0x0, 0x0, 0x0) ftruncate(r0, 0xf4fc) 4m3.271889929s ago: executing program 1 (id=667): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m2.500234556s ago: executing program 1 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getuid() 4m2.32462807s ago: executing program 33 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getuid() 2m25.613566789s ago: executing program 5 (id=1180): r0 = getpid() getpgid(r0) getpgid(r0) wait4(0x0, 0x0, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000086104724e00000000000109022400010000600009040002fe030001000921fdff070122280009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000128000000282281000000d164076f409bedc9e6317ecc6bad051a92108af7d5cb74010000009573718720ecab"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m22.961672977s ago: executing program 5 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000880)={0x8f, 0x0, 0x7}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x42, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x4, 0x3, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m22.716333513s ago: executing program 5 (id=1213): getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m22.504280798s ago: executing program 5 (id=1217): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 2m22.457336369s ago: executing program 5 (id=1218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) 2m22.104313317s ago: executing program 5 (id=1223): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001900010000000000fcffffff00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000cd0000000000000000000000000000000000000000000000000000000014000000d80900000000000000000000000000000000000000000000010000000010000044000500fe8000000000000000000000000000aa5b570002320000000a000000fc0100000000000000000000000000040000000004"], 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m22.007622479s ago: executing program 34 (id=1223): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001900010000000000fcffffff00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000cd0000000000000000000000000000000000000000000000000000000014000000d80900000000000000000000000000000000000000000000010000000010000044000500fe8000000000000000000000000000aa5b570002320000000a000000fc0100000000000000000000000000040000000004"], 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.296652185s ago: executing program 7 (id=2161): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000015006bcd", 0x8}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) 8.963470933s ago: executing program 7 (id=2167): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="d1", 0x1}], 0x1}}], 0x1, 0x4000) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 4.592385269s ago: executing program 7 (id=2183): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 4.284092516s ago: executing program 6 (id=2185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20b, &(0x7f0000001740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) 4.273010306s ago: executing program 4 (id=2186): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001740), 0x1c3800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 4.199539987s ago: executing program 7 (id=2187): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030428bd58000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900200000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.956264553s ago: executing program 0 (id=2189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xef39}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 3.955313643s ago: executing program 4 (id=2190): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181e01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x283, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f00000016c0)=[@in_dx={0x69, 0x20, {0x8b49, 0x4}}], 0x20}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x4, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x2}}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f00000004c0)={0xcc, 0x0, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000003, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.922170624s ago: executing program 4 (id=2191): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000140)=[{r4, 0x2100}, {r3, 0x410}], 0x2, 0x0, 0x0, 0x0) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.461101466s ago: executing program 6 (id=2192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x54, 0x0, &(0x7f0000000540)="c826e3ccda36bd3275694791ca1dba0f347e977248d83671c6c8b93a0856747c1b84d1c26429381aba3e83fd620f0caa2007d74ce1a5c95e6d4f6a4012a4c69b2e6d9edb14c490b32fbb27db25bdfb17c1968dc6"}) 2.420951397s ago: executing program 3 (id=2193): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)={0x2, 0x0, [{0x30000, 0xd0, &(0x7f0000001680)=""/208}, {0x4, 0xc4, &(0x7f0000001780)=""/196}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.403034777s ago: executing program 4 (id=2194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x6, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.353980848s ago: executing program 6 (id=2195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=')', 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x3000, {}, 0x0, 0x2}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.353691988s ago: executing program 0 (id=2196): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x597183, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOCK(r3, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.349802548s ago: executing program 3 (id=2197): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 2.315192129s ago: executing program 6 (id=2198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.213839931s ago: executing program 3 (id=2199): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) creat(0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 2.120452614s ago: executing program 0 (id=2200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x8, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) 2.117456834s ago: executing program 7 (id=2201): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) 1.970640947s ago: executing program 3 (id=2202): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.912330298s ago: executing program 0 (id=2203): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x6005, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$vcsn(0x0, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.8246962s ago: executing program 3 (id=2204): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000140)=[{r4, 0x2100}, {r3, 0x410}], 0x2, 0x0, 0x0, 0x0) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.82451944s ago: executing program 4 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.8235299s ago: executing program 6 (id=2206): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0x3, "91abc12404cf378042"}]}], {0x14}}, 0x78}}, 0x0) 1.761134061s ago: executing program 0 (id=2207): socket$tipc(0x1e, 0x2, 0x0) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x101242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.519286837s ago: executing program 3 (id=2208): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x5, 0x10) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) 752.351634ms ago: executing program 6 (id=2209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 501.055799ms ago: executing program 7 (id=2210): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 500.747239ms ago: executing program 0 (id=2211): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096, 0xa000}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 0s ago: executing program 4 (id=2212): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="5df2", 0x2}, {&(0x7f0000000300)="77b7", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="2bf0", 0x2}, {&(0x7f0000000140)="8843", 0x2}, {&(0x7f0000000480)="764594baec3837f1fedcf5af82ac8366dd", 0x11}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="85", 0x1}, {&(0x7f0000000780)="0e35", 0x2}, {&(0x7f0000000840)="e3bd", 0x2}, {&(0x7f0000000900)="0bb8", 0x2}, {&(0x7f0000000940)=']', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)="aa2d6ea7", 0x4}, {&(0x7f0000000540)="94b0440d0e4a00cd4a456212b0", 0xd}], 0x2}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000d40)="ec71889b15", 0x5}, {&(0x7f0000000e00)="43a8", 0x2}, {&(0x7f0000000e40)='-g=', 0x3}, {&(0x7f0000002a80)='\n\"u', 0x3}, {&(0x7f0000000fc0)="ee0c1d4dfaca59a01d9997055f8c334db67d48cabb8808a613758d54333412c384b842619547bd5482b34e97272b53b13c06620fb120ed8871df31e5ba0a6f61e9e6", 0x42}, {&(0x7f00000010c0)="48c6f3d9", 0x4}, {&(0x7f0000001180)="2712", 0x2}], 0x7}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)="b85f1c", 0x3}, {&(0x7f0000001440)="a51b", 0x2}, {&(0x7f0000001480)="f99d", 0x2}, {&(0x7f0000001540)="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", 0xac1}, {&(0x7f0000000180)="93", 0x1}, {&(0x7f0000002600)="50a2", 0x2}], 0x6}}], 0x6, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): Quota mode: writeback. [ 236.491198][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.546698][ T6789] loop3: detected capacity change from 0 to 7 [ 236.580009][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.642889][ T6789] Dev loop3: unable to read RDB block 7 [ 236.692760][ T1108] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 236.811914][ T6789] loop3: unable to read partition table [ 236.849414][ T6789] loop3: partition table beyond EOD, truncated [ 236.856805][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.900301][ T6789] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.921629][ T1108] usb 2-1: config 0 descriptor?? [ 236.942643][ T6768] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 237.465506][ T1108] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0 [ 237.537237][ T1108] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0 [ 237.606939][ T6801] loop3: detected capacity change from 0 to 256 [ 237.637902][ T1108] corsair 0003:1B1C:1B02.000B: item fetching failed at offset 2/5 [ 237.835316][ T1108] corsair 0003:1B1C:1B02.000B: parse failed [ 237.993412][ T1108] corsair: probe of 0003:1B1C:1B02.000B failed with error -22 [ 238.066119][ T1108] usb 2-1: USB disconnect, device number 8 [ 238.331772][ T6818] loop1: detected capacity change from 0 to 512 [ 238.470376][ T6818] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback. [ 238.495746][ T6818] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.550359][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.550367][ T5762] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 238.626171][ T6826] kvm [6823]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 238.830366][ T5762] usb 5-1: Using ep0 maxpacket: 16 [ 238.851555][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 238.991684][ T1108] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 239.023947][ T1108] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 239.181178][ T1108] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 239.204639][ T6837] binfmt_misc: register: failed to install interpreter file éq‰Y’3aK [ 239.273181][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.401308][ T1108] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.517579][ T1108] usb 1-1: config 0 has no interface number 0 [ 239.598882][ T1108] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 239.786365][ T1108] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 239.801517][ T5762] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.809673][ T5762] usb 5-1: config 0 has no interface number 0 [ 239.817017][ T5762] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.828981][ T5762] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.839511][ T5762] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 239.870250][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.870688][ T1108] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.905854][ T1108] usb 1-1: config 0 interface 125 has no altsetting 0 [ 239.916911][ T6840] loop1: detected capacity change from 0 to 128 [ 239.929251][ T5762] usb 5-1: config 0 descriptor?? [ 239.965133][ T6825] loop5: detected capacity change from 0 to 32768 [ 240.059362][ T6825] XFS (loop5): Mounting V5 Filesystem [ 240.072538][ T1108] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 240.084905][ T6840] handle_bad_sector: 4 callbacks suppressed [ 240.084924][ T6840] attempt to access beyond end of device [ 240.084924][ T6840] loop1: rw=2049, want=250, limit=128 [ 240.118355][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.144949][ T6840] attempt to access beyond end of device [ 240.144949][ T6840] loop1: rw=2049, want=146, limit=128 [ 240.179446][ T1108] usb 1-1: Product: syz [ 240.206719][ T1108] usb 1-1: Manufacturer: syz [ 240.228122][ T1108] usb 1-1: SerialNumber: syz [ 240.259735][ T6825] XFS (loop5): Ending clean mount [ 240.269078][ T1108] usb 1-1: config 0 descriptor?? [ 240.287366][ T6825] XFS (loop5): Quotacheck needed: Please wait. [ 240.398709][ T5716] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 240.416291][ T5716] XFS (loop5): Unmount and run xfs_repair [ 240.423698][ T5716] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 240.431578][ T5716] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 240.440766][ T5716] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 240.449739][ T5716] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 240.468627][ T5716] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 240.479353][ T5716] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 240.513916][ T5716] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.524509][ T6852] device syz_tun left promiscuous mode [ 240.534126][ T5716] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.545980][ T5716] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.559978][ T5716] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 240.590496][ T6825] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 240.615849][ T4238] usb 1-1: USB disconnect, device number 11 [ 240.632036][ T5716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.663557][ T5762] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input10 [ 240.697843][ T5716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.755874][ T5762] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input11 [ 240.777584][ T5762] uclogic 0003:28BD:0071.000C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 240.785695][ T5716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.906251][ T5762] usb 5-1: USB disconnect, device number 10 [ 240.938491][ T5716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.036522][ T6860] fido_id[6860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 241.299760][ T6869] loop0: detected capacity change from 0 to 1024 [ 241.344777][ T5498] XFS (loop5): Unmounting Filesystem [ 241.365538][ T6869] EXT4-fs (loop0): Ignoring removed bh option [ 241.485744][ T6869] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 241.629681][ T6881] loop4: detected capacity change from 0 to 8 [ 241.755398][ T6881] SQUASHFS error: zlib decompression failed, data probably corrupt [ 241.846229][ T6881] SQUASHFS error: Failed to read block 0x9b: -5 [ 241.872178][ T6881] SQUASHFS error: Unable to read metadata cache entry [99] [ 241.888308][ T6881] SQUASHFS error: Unable to read inode 0x127 [ 243.198354][ T6876] loop3: detected capacity change from 0 to 32768 [ 243.258038][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 243.640351][ T4234] Bluetooth: hci0: command 0x0409 tx timeout [ 244.250489][ T4234] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 244.292104][ T6876] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 244.327532][ T6876] BTRFS info (device loop3): setting nodatasum [ 244.334207][ T6876] BTRFS info (device loop3): force zlib compression, level 3 [ 244.341756][ T6876] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 244.351687][ T6876] BTRFS info (device loop3): use lzo compression, level 0 [ 244.358961][ T6876] BTRFS info (device loop3): turning on flush-on-commit [ 244.366516][ T6876] BTRFS info (device loop3): enabling auto defrag [ 244.373422][ T6876] BTRFS info (device loop3): max_inline at 4096 [ 244.380014][ T6876] BTRFS info (device loop3): using free space tree [ 244.388567][ T6876] BTRFS info (device loop3): has skinny extents [ 244.408707][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.427438][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.534363][ T6878] device bridge_slave_0 entered promiscuous mode [ 244.631833][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.660656][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.761913][ T4234] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.909245][ T4234] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.991112][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.067389][ T4234] usb 6-1: config 0 descriptor?? [ 245.583161][ T4234] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 245.693652][ T6876] BTRFS error (device loop3): open_ctree failed: -12 [ 245.696114][ T4491] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4491) [ 245.785993][ T4234] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 245.857592][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 245.917812][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.930315][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.970509][ T6878] device bridge_slave_1 entered promiscuous mode [ 246.669229][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.942885][ C1] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -1 [ 247.040900][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.210404][ T6878] team0: Port device team_slave_0 added [ 247.239211][ T5716] device batadv_slave_0 left promiscuous mode [ 247.282961][ T5716] device hsr_slave_0 left promiscuous mode [ 247.320871][ T5716] device hsr_slave_1 left promiscuous mode [ 247.337815][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.604418][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.840937][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.162092][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 248.188621][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.204635][ T5758] usb 6-1: USB disconnect, device number 3 [ 248.281381][ T5716] device bridge_slave_1 left promiscuous mode [ 248.298760][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.319103][ T5716] device bridge_slave_0 left promiscuous mode [ 248.335877][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.375707][ T5716] device veth1_macvtap left promiscuous mode [ 248.400421][ T5716] device veth0_macvtap left promiscuous mode [ 248.406822][ T5716] device veth1_vlan left promiscuous mode [ 248.427071][ T5716] device veth0_vlan left promiscuous mode [ 248.528837][ T4231] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 248.770957][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 248.809735][ T6983] loop3: detected capacity change from 0 to 40427 [ 248.886754][ T6983] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 248.924017][ T6983] F2FS-fs (loop3): invalid crc value [ 248.931116][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.963798][ T6983] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.023793][ T4231] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 249.086141][ T6983] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.213356][ T4231] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 249.230249][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.238433][ T4231] usb 1-1: Product: syz [ 249.264643][ T4231] usb 1-1: Manufacturer: syz [ 249.270841][ T4231] usb 1-1: SerialNumber: syz [ 249.518586][ T6995] udc-core: couldn't find an available UDC or it's busy [ 249.531231][ T6995] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 249.553388][ T4231] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 249.577533][ T4231] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 249.991081][ T4231] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 250.266499][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 250.521616][ T4231] usb 1-1: USB disconnect, device number 12 [ 253.140505][ T5751] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 253.270602][ T5716] team0 (unregistering): Port device team_slave_1 removed [ 253.368611][ T5716] team0 (unregistering): Port device team_slave_0 removed [ 253.463738][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.540518][ T5751] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 253.550251][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 253.567383][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 253.595113][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.770481][ T5751] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.779675][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.800367][ T5751] usb 1-1: Product: syz [ 253.804597][ T5751] usb 1-1: Manufacturer: syz [ 253.809220][ T5751] usb 1-1: SerialNumber: syz [ 253.840947][ T5751] usb 1-1: config 0 descriptor?? [ 254.132782][ T5751] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 254.228131][ T5751] usb 1-1: USB disconnect, device number 13 [ 254.543936][ T5716] bond0 (unregistering): Released all slaves [ 254.829370][ T6878] team0: Port device team_slave_1 added [ 255.826283][ T7059] loop4: detected capacity change from 0 to 1024 [ 255.876384][ T7059] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 255.876384][ T7059] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 255.876384][ T7059] [ 255.898311][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.904763][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.950752][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.957968][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.984912][ T7059] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,data_err=ignore,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,nouser_xattr,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 255.996490][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.027613][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.034764][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.062132][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.080625][ T4235] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 256.244170][ T6878] device hsr_slave_0 entered promiscuous mode [ 256.277877][ T6878] device hsr_slave_1 entered promiscuous mode [ 256.329999][ T4235] usb 1-1: Using ep0 maxpacket: 32 [ 256.450528][ T4235] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 256.465203][ T4235] usb 1-1: config 0 has no interface number 0 [ 256.512066][ T4235] usb 1-1: config 0 interface 184 has no altsetting 0 [ 256.550422][ T7078] overlayfs: failed to clone upperpath [ 256.671153][ T4235] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 256.690268][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.730317][ T4235] usb 1-1: Product: syz [ 256.755882][ T4235] usb 1-1: Manufacturer: syz [ 256.787886][ T4235] usb 1-1: SerialNumber: syz [ 256.794289][ T7089] process 'syz.5.723' launched './file0' with NULL argv: empty string added [ 256.818656][ T6878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.838295][ T4235] usb 1-1: config 0 descriptor?? [ 256.864794][ T6878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.881427][ T4235] smsc75xx v1.0.0 [ 256.889809][ T6878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.915179][ T6878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 257.147192][ T7095] loop5: detected capacity change from 0 to 128 [ 257.227921][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.241392][ T7095] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 257.322396][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.340785][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.371848][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.393739][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.413113][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.445403][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.452604][ T5721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.512598][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.526974][ T7075] loop4: detected capacity change from 0 to 32768 [ 257.534786][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.551027][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.590306][ T5751] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 257.607683][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.614878][ T5721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.654988][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.665115][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.683404][ T7075] XFS (loop4): Mounting V5 Filesystem [ 257.698341][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.766361][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.848001][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.878012][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.895871][ T7075] XFS (loop4): Ending clean mount [ 257.922514][ T7075] XFS (loop4): Quotacheck needed: Please wait. [ 257.934665][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.976788][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.985686][ T5751] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.015614][ T5751] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.028260][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.079077][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.090835][ T7075] XFS (loop4): Quotacheck: Done. [ 258.107982][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.130775][ T5751] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.155745][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.188592][ T5751] usb 6-1: SerialNumber: syz [ 258.346292][ T4191] XFS (loop4): Unmounting Filesystem [ 258.420462][ T4235] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 258.440532][ T4235] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 258.480484][ T4235] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 258.513139][ T4235] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 258.560431][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.568332][ T4235] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 258.581659][ T5751] usb 6-1: 0:2 : does not exist [ 258.588245][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.596699][ T4235] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.618445][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.632958][ T4235] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 258.650757][ T5751] usb 6-1: USB disconnect, device number 4 [ 258.736757][ T4235] usb 1-1: USB disconnect, device number 14 [ 258.955990][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.326378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.362460][ T7143] kvm: emulating exchange as write [ 259.369370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.439552][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.494590][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.587357][ T6878] device veth0_vlan entered promiscuous mode [ 259.611738][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.628456][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.686632][ T6878] device veth1_vlan entered promiscuous mode [ 259.702871][ T7154] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.804301][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.821013][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.853927][ T4274] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 259.868703][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.895668][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.901214][ T4274] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.944878][ T6878] device veth0_macvtap entered promiscuous mode [ 260.012511][ T6878] device veth1_macvtap entered promiscuous mode [ 260.091516][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 260.257300][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.329344][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.353569][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.374753][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.391891][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.397106][ T7131] loop0: detected capacity change from 0 to 40427 [ 260.414990][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.440635][ T7131] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 260.446136][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.491818][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.507611][ T7131] F2FS-fs (loop0): invalid crc value [ 260.534327][ T7131] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.546152][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.578847][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.636079][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.660552][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.696830][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.720943][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.738391][ T7131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.748146][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.802696][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.832272][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.855361][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.880484][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.889776][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.922867][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.943046][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.952344][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.962561][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.989671][ T6878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.017238][ T6878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.057068][ T6878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.087480][ T6878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.160435][ T7186] netlink: 76 bytes leftover after parsing attributes in process `syz.3.737'. [ 261.396216][ T4657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.414684][ T4657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.454279][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.521738][ T5714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.548616][ T5714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.583294][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.610341][ T4231] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 261.847417][ T7214] overlayfs: failed to clone upperpath [ 261.853357][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 261.998899][ T7226] overlayfs: failed to clone upperpath [ 262.015255][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.103874][ T4231] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 262.163104][ T7233] overlayfs: failed to clone upperpath [ 262.388350][ T4231] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 262.505565][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.529099][ T7240] device batadv_slave_0 entered promiscuous mode [ 262.651582][ T4231] usb 5-1: Product: syz [ 262.698265][ T7239] device batadv_slave_0 left promiscuous mode [ 262.742126][ T4231] usb 5-1: Manufacturer: syz [ 262.825258][ T4231] usb 5-1: SerialNumber: syz [ 263.313599][ T4231] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 263.341707][ T4231] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 263.750445][ T4231] usb 5-1: 2:1 : can't get Cluster Descriptor [ 264.015568][ T4231] usb 5-1: USB disconnect, device number 11 [ 264.124274][ T7286] fuse: Bad value for 'fd' [ 264.390745][ T7296] loop5: detected capacity change from 0 to 8 [ 264.453204][ T7296] SQUASHFS error: zlib decompression failed, data probably corrupt [ 264.496363][ T7296] SQUASHFS error: Failed to read block 0x9b: -5 [ 264.522722][ T7296] SQUASHFS error: Unable to read metadata cache entry [99] [ 264.531869][ T7296] SQUASHFS error: Unable to read inode 0x127 [ 264.705225][ T7314] fuse: Bad value for 'fd' [ 264.867050][ T7322] loop4: detected capacity change from 0 to 2048 [ 264.940928][ T7322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.171509][ T7289] loop6: detected capacity change from 0 to 40427 [ 265.212811][ T7289] F2FS-fs (loop6): Wrong segment_count / block_count (31 > 0) [ 265.259367][ T7289] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 265.303425][ T7289] F2FS-fs (loop6): invalid crc value [ 265.333051][ T7289] F2FS-fs (loop6): Found nat_bits in checkpoint [ 265.504231][ T7289] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 265.522701][ T7289] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 266.502675][ T7289] F2FS-fs (loop6): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 266.574556][ T7289] attempt to access beyond end of device [ 266.574556][ T7289] loop6: rw=2049, want=45104, limit=40427 [ 267.212601][ T7316] loop5: detected capacity change from 0 to 40427 [ 267.453950][ T7316] F2FS-fs (loop5): invalid crc value [ 267.510231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 267.522384][ T7316] F2FS-fs (loop5): Found nat_bits in checkpoint [ 267.748124][ T7316] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 269.553096][ T7409] loop4: detected capacity change from 0 to 64 [ 269.690542][ T7412] fuse: Bad value for 'fd' [ 269.768958][ T4381] Bluetooth: hci3: Frame reassembly failed (-84) [ 269.904008][ T7421] fuse: Bad value for 'fd' [ 270.820672][ T7440] overlayfs: failed to clone upperpath [ 270.915763][ T7443] overlayfs: failed to clone upperpath [ 271.060476][ T7429] loop4: detected capacity change from 0 to 131072 [ 271.188821][ T7429] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 271.197485][ T7429] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 271.226172][ T7429] F2FS-fs (loop4): invalid crc value [ 271.405227][ T7429] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.850431][ T5751] Bluetooth: hci3: command 0x1003 tx timeout [ 271.856546][ T4205] Bluetooth: hci3: sending frame failed (-49) [ 271.878015][ T7429] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 271.885932][ T7429] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 271.988164][ T7457] netlink: 'syz.5.810': attribute type 1 has an invalid length. [ 272.989694][ T7485] device bridge1 entered promiscuous mode [ 274.027544][ T5751] Bluetooth: hci3: command 0x1001 tx timeout [ 274.076728][ T4205] Bluetooth: hci3: sending frame failed (-49) [ 276.138225][ T5756] Bluetooth: hci3: command 0x1009 tx timeout [ 277.199668][ T7555] fuse: Bad value for 'fd' [ 280.050244][ T4231] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.144881][ T7578] loop4: detected capacity change from 0 to 512 [ 280.224757][ T7578] EXT4-fs (loop4): Mount option "commit=0x000000000000009e" incompatible with ext2 [ 280.470832][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.520361][ T5474] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 280.568073][ T4231] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.787979][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.840442][ T5474] usb 5-1: Using ep0 maxpacket: 32 [ 280.961383][ T5474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 281.086085][ T4231] usb 6-1: config 0 descriptor?? [ 281.235454][ T5474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25644, setting to 1024 [ 281.315927][ T4231] usb 6-1: can't set config #0, error -71 [ 281.339434][ T4231] usb 6-1: USB disconnect, device number 5 [ 281.345668][ T5474] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.377261][ T5474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.405189][ T5474] usb 5-1: config 0 descriptor?? [ 281.440638][ T7578] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 281.472436][ T5474] hub 5-1:0.0: USB hub found [ 281.596845][ T7611] fuse: Bad value for 'fd' [ 281.685629][ T5474] hub 5-1:0.0: 1 port detected [ 281.770251][ T4287] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 282.780255][ T4287] usb 7-1: Using ep0 maxpacket: 8 [ 282.930594][ T4287] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 282.956258][ T4287] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 282.976252][ T4287] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 283.006521][ T4287] usb 7-1: config 250 has no interface number 0 [ 283.023315][ T4287] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 283.044904][ T7650] fuse: Bad value for 'fd' [ 283.058863][ T4287] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 283.071974][ T5474] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 283.079464][ T5474] usb 5-1-port1: connect-debounce failed [ 283.085513][ T4287] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.113008][ T4287] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 283.129981][ T4287] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 283.150086][ T4287] usb 7-1: config 250 interface 228 has no altsetting 0 [ 283.239383][ T7657] loop5: detected capacity change from 0 to 1024 [ 283.266847][ T7657] EXT4-fs (loop5): Ignoring removed oldalloc option [ 283.283943][ T7657] EXT4-fs (loop5): Ignoring removed oldalloc option [ 283.311116][ T7657] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.330655][ T4287] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 283.352474][ T4287] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 283.369082][ T4287] usb 7-1: Product: syz [ 283.373986][ T4287] usb 7-1: SerialNumber: syz [ 283.379724][ T7657] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 283.463720][ T4287] hub 7-1:250.228: bad descriptor, ignoring hub [ 283.478214][ T4287] hub: probe of 7-1:250.228 failed with error -5 [ 283.688300][ T4287] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 283.948708][ T5756] usb 5-1: USB disconnect, device number 12 [ 284.599713][ T7607] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 285.066092][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.877'. [ 285.438857][ T7728] loop4: detected capacity change from 0 to 1024 [ 285.508765][ T7728] EXT4-fs (loop4): Ignoring removed oldalloc option [ 285.555112][ T7728] EXT4-fs (loop4): Ignoring removed oldalloc option [ 285.575042][ T7728] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.607067][ T7730] loop5: detected capacity change from 0 to 4096 [ 285.645017][ T7728] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 286.299503][ T7730] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 286.561887][ T7750] overlayfs: failed to clone upperpath [ 286.998702][ T7768] loop4: detected capacity change from 0 to 512 [ 287.749949][ T5498] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 288.681068][ T4238] Bluetooth: hci5: command 0x0406 tx timeout [ 289.121047][ T7831] overlayfs: failed to clone lowerpath [ 289.810215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.090220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.100210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.110210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.120209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.130200][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.140201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.150196][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 290.300320][ T7607] usb 7-1: can't restore configuration #250 (error=-110) [ 290.315990][ T4235] usb 7-1: USB disconnect, device number 2 [ 290.338049][ T4235] usblp0: removed [ 291.383058][ T7864] overlayfs: statfs failed on './file0' [ 292.340127][ T7859] loop6: detected capacity change from 0 to 8192 [ 292.591274][ T7859] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.605519][ T7905] loop6: detected capacity change from 0 to 128 [ 293.676846][ T7904] loop4: detected capacity change from 0 to 2048 [ 293.717681][ T7905] EXT4-fs warning (device loop6): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 293.758594][ T4284] udevd[4284]: incorrect ext4 checksum on /dev/loop6 [ 293.775307][ T7905] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 294.017726][ T7904] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 294.448415][ T7904] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 294.550906][ T7904] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 294.625164][ T7904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.662560][ T7912] tipc: Started in network mode [ 294.708459][ T7912] tipc: Node identity ac1414aa, cluster identity 4711 [ 294.754450][ T7912] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 294.765638][ T7912] tipc: Enabled bearer , priority 10 [ 294.901420][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 295.301685][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 295.440298][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 295.590311][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 295.730309][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 296.164307][ T7949] overlayfs: failed to clone upperpath [ 296.845534][ T5751] tipc: Node number set to 2886997162 [ 296.880323][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 297.160410][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.115685][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.500330][ T4231] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 298.901199][ T4231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.051676][ T4231] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 299.160304][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 299.246110][ T4231] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 299.660724][ T4231] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.669832][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.717325][ T4231] usb 5-1: Product: syz [ 299.735043][ T4231] usb 5-1: Manufacturer: syz [ 299.739719][ T4231] usb 5-1: SerialNumber: syz [ 299.968007][ T7981] loop6: detected capacity change from 0 to 32768 [ 300.060982][ T7981] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.949 (7981) [ 300.073564][ T4231] cdc_ncm 5-1:1.0: bind() failure [ 300.087593][ T4231] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 300.110327][ T4231] cdc_ncm 5-1:1.1: bind() failure [ 300.133453][ T7981] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 300.164738][ T4231] usb 5-1: USB disconnect, device number 13 [ 300.176544][ T7981] BTRFS info (device loop6): using free space tree [ 300.195974][ T7981] BTRFS info (device loop6): has skinny extents [ 300.210318][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 300.401845][ T7981] BTRFS info (device loop6): enabling ssd optimizations [ 300.518974][ T26] audit: type=1800 audit(1783065641.417:17): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.949" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 300.916202][ T8030] loop5: detected capacity change from 0 to 32768 [ 301.107015][ T8030] XFS (loop5): Mounting V5 Filesystem [ 301.249011][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 301.255009][ T8050] overlayfs: failed to clone upperpath [ 302.290316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 302.410443][ T8030] XFS (loop5): Ending clean mount [ 302.567536][ T26] audit: type=1800 audit(1783065643.467:18): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.958" name="file1" dev="loop5" ino=4427 res=0 errno=0 [ 303.426322][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 303.465835][ T5498] XFS (loop5): Unmounting Filesystem [ 303.521453][ T5760] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 303.840424][ T5760] usb 5-1: Using ep0 maxpacket: 16 [ 304.440315][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 304.768007][ T5760] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 304.811353][ T8088] loop6: detected capacity change from 0 to 512 [ 304.825864][ T5760] usb 5-1: config 1 has no interface number 0 [ 304.833949][ T5760] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 304.844496][ T5760] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 304.870374][ T8088] EXT4-fs (loop6): Mount option "commit=0x000000000000009e" incompatible with ext2 [ 304.886659][ T5760] usb 5-1: config 1 interface 105 has no altsetting 0 [ 305.854232][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 305.935687][ T5760] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 305.964673][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 305.997368][ T5760] usb 5-1: Product: syz [ 306.003700][ T5760] usb 5-1: Manufacturer: syz [ 306.070312][ T5763] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 306.078213][ T5760] usb 5-1: can't set config #1, error -71 [ 306.100577][ T5760] usb 5-1: USB disconnect, device number 14 [ 306.144024][ T8109] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 306.152195][ T8109] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 306.996460][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 307.139640][ T8129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.990'. [ 307.166011][ T5763] usb 7-1: Using ep0 maxpacket: 32 [ 307.335969][ T5763] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 308.114451][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 308.195669][ T5763] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25644, setting to 1024 [ 308.207438][ T5763] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 308.250299][ T5763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.287736][ T5763] usb 7-1: config 0 descriptor?? [ 308.339125][ T5763] usb 7-1: can't set config #0, error -71 [ 308.352276][ T5763] usb 7-1: USB disconnect, device number 4 [ 309.160422][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 309.636652][ T8163] loop6: detected capacity change from 0 to 8192 [ 309.672722][ T8178] syz.4.1006 sent an empty control message without MSG_MORE. [ 310.200319][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 310.729549][ T8188] loop6: detected capacity change from 0 to 512 [ 310.784223][ T8182] loop4: detected capacity change from 0 to 8192 [ 310.837658][ T8182] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.963004][ T8188] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x000000000000000e,,errors=continue. Quota mode: writeback. [ 311.194368][ T8188] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 5 (only 1 groups) [ 311.250294][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 312.280313][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 312.776243][ T8232] loop5: detected capacity change from 0 to 256 [ 312.903787][ T8232] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 314.417297][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 315.004318][ T8253] loop5: detected capacity change from 0 to 512 [ 315.066565][ T8253] EXT4-fs (loop5): Test dummy encryption mode enabled [ 315.075625][ T8253] EXT4-fs (loop5): Test dummy encryption mode enabled [ 315.083799][ T8253] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.125302][ T8253] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 315.412888][ T8253] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 315.437696][ T8253] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1031: Directory hole found for htree leaf block 0 [ 315.480411][ T8253] EXT4-fs (loop5): Remounting filesystem read-only [ 315.490621][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 315.514910][ T8253] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1031: Directory hole found for htree leaf block 0 [ 315.537409][ T8253] EXT4-fs (loop5): Remounting filesystem read-only [ 315.560047][ T8253] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #2: comm syz.5.1031: Directory hole found for htree leaf block 0 [ 315.607846][ T8253] EXT4-fs (loop5): Remounting filesystem read-only [ 316.520299][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.729030][ T8278] overlayfs: failed to clone lowerpath [ 316.797274][ T8279] overlayfs: failed to clone lowerpath [ 316.805363][ T5756] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 317.333307][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.339719][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.411390][ T5756] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 317.431666][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 317.455868][ T5756] usb 5-1: Product: syz [ 317.463433][ T8301] fuse: root generation should be zero [ 317.466613][ T5756] usb 5-1: SerialNumber: syz [ 317.509663][ T5756] usb 5-1: config 0 descriptor?? [ 317.570303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 317.889509][ T5756] hso 5-1:0.0: Failed to find BULK IN ep [ 318.537060][ T4235] usb 5-1: USB disconnect, device number 15 [ 318.688107][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 318.725581][ T8320] overlayfs: failed to clone upperpath [ 319.720359][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 319.940847][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 320.330690][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.467202][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.477812][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.491936][ T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.510392][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.539996][ T23] usb 7-1: config 0 descriptor?? [ 320.733937][ T8332] loop4: detected capacity change from 0 to 40427 [ 321.156237][ T23] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 321.302054][ T23] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 321.462591][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 321.478261][ T23] usb 7-1: USB disconnect, device number 5 [ 321.516642][ T8332] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 321.548701][ T8332] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 321.550386][ T5756] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 321.578891][ T8332] F2FS-fs (loop4): invalid crc value [ 321.613126][ T8332] F2FS-fs (loop4): Found nat_bits in checkpoint [ 321.669048][ T8332] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 321.676509][ T8332] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 321.807095][ T8332] attempt to access beyond end of device [ 321.807095][ T8332] loop4: rw=10241, want=45104, limit=40427 [ 322.520369][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 322.762259][ T5756] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.773258][ T5756] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 322.835689][ T5756] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 323.030527][ T5756] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.058357][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.070429][ T5756] usb 6-1: Product: syz [ 323.075058][ T5756] usb 6-1: Manufacturer: syz [ 323.079829][ T5756] usb 6-1: SerialNumber: syz [ 324.186331][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 324.241656][ T5756] cdc_ncm 6-1:1.0: bind() failure [ 324.267553][ T5756] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 324.310219][ T5756] cdc_ncm 6-1:1.1: bind() failure [ 324.340709][ T5756] usb 6-1: USB disconnect, device number 6 [ 325.250537][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 325.332533][ T8401] loop5: detected capacity change from 0 to 128 [ 325.375969][ T8401] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 325.390385][ T8401] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.755001][ T8399] loop4: detected capacity change from 0 to 32768 [ 325.866151][ T8399] XFS (loop4): Mounting V5 Filesystem [ 325.942757][ T8399] XFS (loop4): Ending clean mount [ 326.123439][ T4191] XFS (loop4): Unmounting Filesystem [ 326.278165][ T8432] tipc: Started in network mode [ 326.283469][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 326.297314][ T8432] tipc: Node identity ac1414aa, cluster identity 4711 [ 326.306735][ T8432] tipc: Enabled bearer , priority 10 [ 326.502385][ T8438] loop4: detected capacity change from 0 to 512 [ 326.587683][ T8441] loop6: detected capacity change from 0 to 1024 [ 326.619263][ T8438] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 326.702652][ T8438] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.728109][ T8441] EXT4-fs (loop6): Ignoring removed bh option [ 326.804500][ T8441] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,usrjquota=,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 326.882368][ T8441] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #2: block 16: comm syz.6.1096: lblock 0 mapped to illegal pblock 16 (length 1) [ 327.029340][ T8441] EXT4-fs (loop6): Remounting filesystem read-only [ 327.057466][ T8448] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1096: Invalid inode table block 5 in block_group 0 [ 327.357065][ T8448] EXT4-fs (loop6): Remounting filesystem read-only [ 327.439975][ T8448] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 327.499982][ T8448] EXT4-fs (loop6): Remounting filesystem read-only [ 327.855061][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 327.867109][ T5763] tipc: Node number set to 2886997162 [ 328.119139][ T8474] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 328.240433][ T8481] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1109'. [ 329.299648][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 330.307380][ T8507] loop6: detected capacity change from 0 to 512 [ 330.355871][ T8507] EXT4-fs (loop6): Ignoring removed nobh option [ 330.370450][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 330.404486][ T8511] loop4: detected capacity change from 0 to 128 [ 330.476377][ T8507] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,nobh,i_version,errors=remount-ro,data_err=ignore,max_batch_time=0x000000000000007f,resuid=0x000000000000ee00,nojournal_checksum,init_itable,. Quota mode: writeback. [ 330.510122][ T8507] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.595816][ T8507] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1115: corrupted inode contents [ 330.643246][ T8507] EXT4-fs (loop6): Remounting filesystem read-only [ 330.693490][ T8507] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.1115: mark_inode_dirty error [ 330.727025][ T8507] EXT4-fs (loop6): Remounting filesystem read-only [ 330.763662][ T8507] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1115: corrupted inode contents [ 330.775389][ T8530] overlayfs: failed to clone lowerpath [ 330.800795][ T8507] EXT4-fs (loop6): Remounting filesystem read-only [ 330.807379][ T8507] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1115: mark_inode_dirty error [ 330.847455][ T8507] EXT4-fs (loop6): Remounting filesystem read-only [ 330.889128][ T8507] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1115: corrupted inode contents [ 330.964587][ T8507] EXT4-fs (loop6): Remounting filesystem read-only [ 330.986221][ T8507] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.1115: mark_inode_dirty error [ 331.018919][ T8507] EXT4-fs (loop6): Remounting filesystem read-only [ 331.052770][ T8507] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1115: corrupted inode contents [ 331.069851][ T8507] EXT4-fs (loop6): Remounting filesystem read-only [ 331.100058][ T8539] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1115: corrupted inode contents [ 331.146315][ T8541] loop4: detected capacity change from 0 to 64 [ 331.184908][ T8539] EXT4-fs (loop6): Remounting filesystem read-only [ 331.210395][ T8539] EXT4-fs error (device loop6): add_dirent_to_buf:2216: inode #2: comm syz.6.1115: mark_inode_dirty error [ 331.230210][ T8539] EXT4-fs (loop6): Remounting filesystem read-only [ 331.400491][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 331.416884][ T8547] program syz.5.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.507660][ T8552] overlayfs: failed to clone upperpath [ 331.754148][ T4240] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 331.922965][ T8574] kvm: pic: non byte write [ 332.116877][ T8588] overlayfs: upper fs does not support file handles, falling back to index=off. [ 332.140510][ T4240] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 332.156212][ T4240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.201622][ T4240] usb 7-1: config 0 descriptor?? [ 332.440307][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 332.654987][ T8611] loop5: detected capacity change from 0 to 128 [ 332.708803][ T4240] ath6kl: Failed to read usb control message: -71 [ 332.736436][ T4240] ath6kl: Unable to read the bmi data from the device: -71 [ 332.747590][ T8611] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.763692][ T8595] loop4: detected capacity change from 0 to 32768 [ 332.794174][ T4240] ath6kl: Unable to recv target info: -71 [ 332.873349][ T8611] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.885516][ T4240] ath6kl: Failed to init ath6kl core: -71 [ 333.050797][ T4240] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 333.061867][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 333.100394][ T4240] usb 7-1: USB disconnect, device number 6 [ 333.107968][ T8595] XFS (loop4): Mounting V5 Filesystem [ 333.231477][ T8595] XFS (loop4): Ending clean mount [ 333.299245][ C1] Unknown status report in ack skb [ 333.465748][ T4191] XFS (loop4): Unmounting Filesystem [ 333.480512][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 333.532441][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1164'. [ 334.520300][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 335.560404][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 336.845364][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 337.880456][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 338.210257][ T1108] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 338.581036][ T1108] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 338.681595][ T1108] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.924087][ T1108] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.032082][ T1108] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 339.052353][ T1108] usb 6-1: config 0 interface 0 has no altsetting 0 [ 339.059299][ T1108] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 339.098110][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.161123][ T1108] usb 6-1: config 0 descriptor?? [ 339.215983][ T8715] netlink: 'syz.6.1187': attribute type 27 has an invalid length. [ 339.230521][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 339.476840][ C0] Unknown status report in ack skb [ 339.563976][ T8732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 339.692854][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x2 [ 339.699992][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x0 [ 339.734912][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x0 [ 339.773895][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0xd [ 339.822640][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x3 [ 339.857892][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x1 [ 339.885937][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x0 [ 339.914794][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x7 [ 339.941365][ T1108] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x2 [ 339.948684][ T1108] hid-rmi 0003:0461:4E72.0010: item fetching failed at offset 39/40 [ 339.983044][ T1108] hid-rmi 0003:0461:4E72.0010: parse failed [ 340.009815][ T1108] hid-rmi: probe of 0003:0461:4E72.0010 failed with error -22 [ 340.023604][ T8743] loop6: detected capacity change from 0 to 4096 [ 340.059244][ T1108] usb 6-1: USB disconnect, device number 7 [ 340.186730][ T8755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1201'. [ 340.221441][ T26] audit: type=1800 audit(1783065681.127:19): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1197" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 340.256648][ T8755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1201'. [ 340.291021][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 340.420357][ T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 340.594167][ T8770] overlayfs: failed to clone upperpath [ 340.670320][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 340.790528][ T23] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.820329][ T23] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.840789][ T5760] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 340.860232][ T23] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 340.905212][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 340.930577][ T23] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 340.939723][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.990590][ T23] usb 5-1: config 0 descriptor?? [ 341.225191][ T5760] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 341.234671][ T5760] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.253269][ T5760] usb 7-1: config 0 has no interfaces? [ 341.259405][ T5760] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 341.272948][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.292438][ T5760] usb 7-1: config 0 descriptor?? [ 341.321097][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 341.337504][ T4381] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.406992][ T4381] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.517422][ T4381] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.622888][ T4381] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.704619][ T4240] usb 5-1: USB disconnect, device number 16 [ 341.928003][ T8800] chnl_net:caif_netlink_parms(): no params data found [ 342.025639][ T8800] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.033149][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.042924][ T8800] device bridge_slave_0 entered promiscuous mode [ 342.053067][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.079929][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.107625][ T8800] device bridge_slave_1 entered promiscuous mode [ 342.152260][ T8800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.169179][ T8800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.197367][ T8800] team0: Port device team_slave_0 added [ 342.213165][ T8800] team0: Port device team_slave_1 added [ 342.255796][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.263021][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.291987][ T8800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.321360][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.338630][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.365127][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 342.413796][ T8800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.505635][ T8800] device hsr_slave_0 entered promiscuous mode [ 342.532978][ T8800] device hsr_slave_1 entered promiscuous mode [ 342.542793][ T8800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.837013][ T8800] Cannot create hsr debugfs directory [ 343.410350][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 343.527494][ T1108] usb 7-1: USB disconnect, device number 7 [ 343.608066][ T8842] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 343.727238][ T8839] loop4: detected capacity change from 0 to 4096 [ 343.800296][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 344.558880][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 344.591160][ T8839] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 345.560317][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 345.880383][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 346.635664][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 346.871436][ T8800] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 346.896004][ T8800] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 346.931050][ T8800] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.011676][ T8800] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 347.464030][ T8929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 347.540675][ T8800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.650304][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 347.960478][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 348.443173][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.471198][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.511017][ T8939] loop4: detected capacity change from 0 to 256 [ 348.517478][ T8800] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.553165][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.586696][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.626271][ T8939] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 348.647217][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.654413][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.676467][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.685898][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 348.797024][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.816105][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.837090][ T8949] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1271'. [ 348.852568][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.859743][ T4549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.973903][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.033740][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.084369][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.102593][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.151080][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.179856][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.200230][ T4240] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 349.221172][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.256655][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.287128][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.329757][ T8800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.355320][ T8962] loop4: detected capacity change from 0 to 4096 [ 349.363593][ T8800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.402442][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.417717][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.460239][ T4240] usb 7-1: Using ep0 maxpacket: 16 [ 349.490736][ T8965] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.555346][ T4284] udevd[4284]: incorrect nilfs2 checksum on /dev/loop4 [ 349.590336][ T4240] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 349.609821][ T4240] usb 7-1: config 0 has no interface number 0 [ 349.632273][ T4240] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 349.701717][ T4240] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 349.720441][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 349.859983][ T4381] device hsr_slave_0 left promiscuous mode [ 349.900347][ T4240] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 349.909502][ T4240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.952001][ T4240] usb 7-1: Product: syz [ 349.956362][ T4240] usb 7-1: Manufacturer: syz [ 349.972572][ T4240] usb 7-1: SerialNumber: syz [ 350.003182][ T4240] usb 7-1: config 0 descriptor?? [ 350.022241][ T8952] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.029377][ T8952] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.048774][ T4381] device hsr_slave_1 left promiscuous mode [ 350.069111][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.080316][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.089075][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.097077][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.106167][ T4381] device bridge_slave_1 left promiscuous mode [ 350.117249][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.130264][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 350.168460][ T4381] device bridge_slave_0 left promiscuous mode [ 350.179318][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.219046][ T4381] device veth1_macvtap left promiscuous mode [ 350.232949][ T4381] device veth0_macvtap left promiscuous mode [ 350.239215][ T4381] device veth1_vlan left promiscuous mode [ 350.250663][ T4381] device veth0_vlan left promiscuous mode [ 350.277737][ T8952] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.290332][ T8952] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.451675][ T8996] xt_hashlimit: max too large, truncated to 1048576 [ 350.544953][ T4240] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 350.656399][ T9003] overlayfs: failed to clone upperpath [ 350.770350][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 350.813342][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 350.853857][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 350.870032][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.886817][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.977424][ T4381] bond0 (unregistering): Released all slaves [ 351.071968][ T8800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.079446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.088134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.107053][ C0] Unknown status report in ack skb [ 351.439066][ T9035] overlayfs: failed to clone upperpath [ 351.630339][ T4240] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 351.654820][ T4240] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 351.700352][ T4240] asix: probe of 7-1:0.34 failed with error -71 [ 351.747760][ T4240] usb 7-1: USB disconnect, device number 8 [ 351.800333][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 351.831198][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.846477][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.898537][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.913931][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.941544][ T8800] device veth0_vlan entered promiscuous mode [ 351.959898][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.983465][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.018509][ T8800] device veth1_vlan entered promiscuous mode [ 352.085522][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 352.099479][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 352.125403][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.186831][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.271853][ T8800] device veth0_macvtap entered promiscuous mode [ 352.342265][ T8800] device veth1_macvtap entered promiscuous mode [ 352.412540][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.457843][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.502340][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.543535][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.587686][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.626668][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.658851][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.697314][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.742321][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.775464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.800797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 352.835333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.850363][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 352.873134][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.907811][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.950225][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.990229][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.036291][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.074513][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.105271][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.117086][ T9095] overlayfs: failed to clone upperpath [ 353.153914][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.204213][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.258297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.285140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.354163][ T8800] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.388471][ T8800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.429823][ T8800] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.466198][ T8800] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.718655][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.770707][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.827468][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.867861][ T4647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.890274][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 353.897597][ T4647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.930450][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.900350][ T4240] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 354.930594][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 355.270561][ T4240] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.292896][ T4240] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.315388][ T4240] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 355.347572][ T4240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.380748][ T4240] usb 7-1: config 0 descriptor?? [ 355.873429][ T4240] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 355.900299][ T4240] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 355.967266][ T4240] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 355.970889][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 355.977601][ T4240] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 356.007909][ T4240] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 356.048165][ T4240] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 356.170546][ T9191] netlink: 'syz.0.1343': attribute type 5 has an invalid length. [ 356.188615][ T9194] overlayfs: failed to clone upperpath [ 356.622000][ T4240] playstation 0003:054C:0DF2.0012: Invalid gyro calibration data for axis (3), disabling calibration. [ 356.649447][ T4240] playstation 0003:054C:0DF2.0012: Invalid gyro calibration data for axis (4), disabling calibration. [ 356.666370][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 356.685723][ T4240] playstation 0003:054C:0DF2.0012: Invalid gyro calibration data for axis (5), disabling calibration. [ 356.727580][ T4240] playstation 0003:054C:0DF2.0012: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 356.762061][ T4240] playstation 0003:054C:0DF2.0012: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 356.791176][ T4240] playstation 0003:054C:0DF2.0012: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 356.844032][ T4240] input: HID 054c:0df2 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:0DF2.0012/input/input12 [ 356.905966][ T4240] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:0DF2.0012/input/input13 [ 356.957581][ T4240] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:0DF2.0012/input/input14 [ 357.010351][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 357.069042][ T4240] playstation 0003:054C:0DF2.0012: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 357.140684][ T4240] usb 7-1: USB disconnect, device number 9 [ 357.368768][ T9257] fido_id[9257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 358.033158][ T26] audit: type=1326 audit(1783065698.937:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f149ee70e59 code=0x0 [ 358.057031][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 358.713876][ T9319] loop7: detected capacity change from 0 to 256 [ 358.751757][ T9319] exfat: Deprecated parameter 'utf8' [ 358.812258][ T9319] exfat: Bad value for 'errors' [ 358.846831][ T9319] xt_hashlimit: size too large, truncated to 1048576 [ 359.080467][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 359.443419][ T9342] overlayfs: failed to clone upperpath [ 359.483771][ T9342] overlayfs: failed to clone upperpath [ 359.919044][ T9355] netlink: 'syz.4.1377': attribute type 2 has an invalid length. [ 359.943134][ T9355] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 359.969119][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 360.120298][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 360.689252][ T9384] overlayfs: failed to clone upperpath [ 361.160392][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 361.923738][ T9432] overlayfs: failed to clone upperpath [ 362.155205][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 362.210332][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 363.250319][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 364.280313][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 364.981415][ T9469] loop6: detected capacity change from 0 to 40427 [ 364.993991][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.002103][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.035498][ T9469] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 365.043498][ T9469] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 365.109751][ T9469] F2FS-fs (loop6): Found nat_bits in checkpoint [ 365.171590][ T9469] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 365.179142][ T9469] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 365.231680][ T26] audit: type=1804 audit(1783065706.127:21): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1408" name="/newroot/72/file0/bus" dev="loop6" ino=10 res=1 errno=0 [ 365.330721][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 366.360420][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 367.370001][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.400476][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 367.902931][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.440356][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 368.588938][ T9456] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.598925][ T9456] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.608693][ T9456] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.619872][ T9456] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.638767][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'. [ 368.648337][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'. [ 368.674478][ T9459] device erspan0 entered promiscuous mode [ 368.683202][ T9459] device gretap0 entered promiscuous mode [ 368.696897][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'. [ 368.711531][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'. [ 368.744388][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 368.843961][ T9511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.851997][ T9511] device batadv_slave_0 entered promiscuous mode [ 369.480405][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 369.535730][ T9559] netlink: 'syz.4.1437': attribute type 25 has an invalid length. [ 369.571237][ T9559] netlink: 'syz.4.1437': attribute type 29 has an invalid length. [ 369.813198][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 370.520289][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 370.791650][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.794011][ C1] hrtimer: interrupt took 196993 ns [ 370.799434][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.089926][ T9607] loop7: detected capacity change from 0 to 32768 [ 371.103931][ T9611] overlayfs: failed to clone upperpath [ 371.204103][ T9607] XFS (loop7): Mounting V5 Filesystem [ 371.357076][ T9607] XFS (loop7): Ending clean mount [ 371.572070][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 371.612697][ T9589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.651603][ T8800] XFS (loop7): Unmounting Filesystem [ 371.688128][ T9589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.372144][ T9629] loop7: detected capacity change from 0 to 32768 [ 372.449438][ T9589] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.459237][ T9589] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.470021][ T9589] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.479262][ T9589] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.507875][ T9629] XFS (loop7): Mounting V5 Filesystem [ 372.580062][ T9629] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 372.600279][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 372.636144][ T9629] XFS (loop7): Starting recovery (logdev: internal) [ 372.670608][ T9629] XFS (loop7): Ending recovery (logdev: internal) [ 372.691112][ T9629] XFS (loop7): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 372.710838][ T9629] XFS (loop7): Failed to initialize disk quotas. [ 372.798303][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'. [ 372.899639][ T9598] bond0: (slave bond_slave_0): Releasing backup interface [ 372.910745][ T8800] XFS (loop7): Unmounting Filesystem [ 373.390826][ T9657] Process accounting resumed [ 373.654470][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 373.974805][ T9680] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 374.047322][ T9680] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 374.182748][ T9679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.209369][ T9683] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.680368][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 374.930325][ T5474] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 375.230357][ T5474] usb 7-1: Using ep0 maxpacket: 32 [ 375.351624][ T5474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.720331][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 375.727239][ T5474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.742323][ T5474] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 375.752564][ T5474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.778861][ T5474] usb 7-1: config 0 descriptor?? [ 375.821446][ T5474] hub 7-1:0.0: USB hub found [ 376.040523][ T5474] hub 7-1:0.0: 1 port detected [ 376.690285][ T4231] hub 7-1:0.0: activate --> -90 [ 376.770289][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 377.371574][ T5474] usb 7-1: USB disconnect, device number 10 [ 377.380470][ T4231] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 377.390571][ T4231] usb 7-1-port1: attempt power cycle [ 377.800538][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 377.975865][ T9766] loop7: detected capacity change from 0 to 32768 [ 378.012160][ T9791] overlayfs: failed to clone upperpath [ 378.060586][ T9766] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 378.084206][ T9766] BTRFS info (device loop7): turning on sync discard [ 378.106200][ T9766] BTRFS info (device loop7): use zlib compression, level 3 [ 378.153109][ T9766] BTRFS info (device loop7): turning off barriers [ 378.202116][ T9766] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 378.258480][ T9800] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.290294][ T9766] BTRFS info (device loop7): trying to use backup root at mount time [ 378.298624][ T9766] BTRFS info (device loop7): enabling auto defrag [ 378.347944][ T9766] BTRFS info (device loop7): max_inline at 0 [ 378.369146][ T9766] BTRFS info (device loop7): using free space tree [ 378.381300][ T9803] overlayfs: failed to clone upperpath [ 378.400207][ T9766] BTRFS info (device loop7): has skinny extents [ 378.616475][ T9261] BTRFS warning (device loop7): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 378.647995][ T9766] BTRFS warning (device loop7): failed to read root (objectid=2): -5 [ 378.670186][ T4639] BTRFS warning (device loop7): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 378.721425][ T9766] BTRFS warning (device loop7): couldn't read tree root [ 378.741262][ T9766] BTRFS error (device loop7): parent transid verify failed on 5255168 wanted 5 found 7 [ 378.752455][ T9766] BTRFS warning (device loop7): couldn't read tree root [ 378.762874][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.769536][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.814324][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1522'. [ 378.823647][ T9766] BTRFS info (device loop7): enabling ssd optimizations [ 378.847534][ T9766] BTRFS info (device loop7): clearing free space tree [ 378.852162][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 378.894631][ T9766] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 378.913530][ T9836] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.923540][ T9836] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.932579][ T9836] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.942202][ T9836] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.963033][ T9766] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 379.024946][ T9766] BTRFS info (device loop7): creating free space tree [ 379.055209][ T9766] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 379.066607][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1522'. [ 379.084950][ T9766] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 379.199272][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 379.242750][ T9852] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.252589][ T9852] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.261396][ T9852] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.270268][ T9852] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.350444][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 379.541819][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1533'. [ 379.612766][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1533'. [ 379.880517][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 380.930729][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 381.035160][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 381.118827][ T9932] device team1 entered promiscuous mode [ 381.167765][ T9932] 8021q: adding VLAN 0 to HW filter on device team1 [ 381.189456][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 381.256587][ T9934] device team2 entered promiscuous mode [ 381.269012][ T9934] 8021q: adding VLAN 0 to HW filter on device team2 [ 381.935643][ T9965] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 381.971027][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 382.216516][ T9910] Set syz1 is full, maxelem 6117 reached [ 383.000549][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 383.027149][ T9982] overlayfs: failed to clone upperpath [ 383.165186][ T9987] loop7: detected capacity change from 0 to 512 [ 383.208291][ T9984] kvm: pic: non byte write [ 383.231002][ T9987] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 383.291900][ T9987] EXT4-fs (loop7): 1 truncate cleaned up [ 383.297605][ T9987] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 383.881407][ T5760] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 384.050427][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 384.170254][ T5760] usb 7-1: Using ep0 maxpacket: 16 [ 384.224867][T10021] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 384.300306][ T5760] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 384.315639][ T5760] usb 7-1: config 0 has no interface number 0 [ 384.334127][ T5760] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 384.358686][ T5760] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 384.420920][T10025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.604936][ T5760] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 384.640368][ T5760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.648558][ T5760] usb 7-1: Product: syz [ 384.667915][ T5760] usb 7-1: Manufacturer: syz [ 384.682722][ T5760] usb 7-1: SerialNumber: syz [ 384.707076][ T5760] usb 7-1: config 0 descriptor?? [ 384.750532][ T9995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 384.758072][ T9995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 385.014517][ T9995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 385.034560][ T9995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 385.080497][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 385.300616][ T5760] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 386.120414][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 386.611456][ T5760] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 386.647177][ T5760] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 386.682631][ T5760] asix: probe of 7-1:0.34 failed with error -71 [ 386.693341][ T5760] usb 7-1: USB disconnect, device number 15 [ 387.160378][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 388.211563][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 388.679044][T10190] crypto_alloc_aead failed rc=-2 [ 389.098177][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 389.250332][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 389.799557][T10255] overlayfs: failed to clone upperpath [ 389.914750][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 389.975140][T10258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.290451][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 390.771202][T10289] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 390.940570][T10226] loop7: detected capacity change from 0 to 32768 [ 391.027418][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.037935][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.159889][T10226] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.1620 (10226) [ 391.186857][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1639'. [ 391.223947][T10226] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 391.258351][T10310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 391.271215][T10226] BTRFS info (device loop7): using free space tree [ 391.303219][T10226] BTRFS info (device loop7): has skinny extents [ 391.330379][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 391.386954][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1645'. [ 391.513300][T10226] BTRFS info (device loop7): enabling ssd optimizations [ 392.017437][T10343] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 392.178015][T10347] device ip6gretap1 entered promiscuous mode [ 392.207254][T10347] bond1: (slave ip6gretap1): no link monitoring support [ 392.234631][T10347] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 392.302172][T10347] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 392.320288][ T5760] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 392.370430][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 392.730892][ T5760] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 392.771392][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.814904][ T5760] usb 7-1: config 0 descriptor?? [ 392.892695][ T5760] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 393.400350][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 394.020326][T10392] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1668'. [ 394.065160][T10392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1668'. [ 394.450383][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 394.533068][T10215] Set syz1 is full, maxelem 65536 reached [ 395.035054][ T5760] usb 7-1: USB disconnect, device number 16 [ 395.480356][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 396.530327][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 396.790291][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.797784][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.560266][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 397.679502][ T26] audit: type=1800 audit(1783065738.577:22): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1685" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 398.099233][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.194725][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.259706][T10453] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 398.259706][T10453] The task syz.4.1688 (10453) triggered the difference, watch for misbehavior. [ 398.600311][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 398.907476][T10401] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.916814][T10401] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.926642][T10401] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.935871][T10401] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.145232][T10401] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.154361][T10401] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.163327][T10401] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.172427][T10401] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.650303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 399.870317][ T9926] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 399.943348][T10498] overlayfs: failed to clone upperpath [ 400.123048][ T9926] usb 7-1: Using ep0 maxpacket: 32 [ 400.312121][T10504] overlayfs: failed to clone upperpath [ 400.333137][T10504] overlayfs: failed to clone upperpath [ 400.404453][ T9926] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 400.426313][ T9926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.447672][ T9926] usb 7-1: Product: syz [ 400.457889][ T9926] usb 7-1: Manufacturer: syz [ 400.469909][ T9926] usb 7-1: SerialNumber: syz [ 400.497794][ T9926] usb 7-1: config 0 descriptor?? [ 400.555913][ T9926] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 400.690304][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 401.720272][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 402.770320][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 403.140291][ T9926] gspca_ov534_9: reg_r err -71 [ 403.172296][ T26] audit: type=1800 audit(1783065744.077:23): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1720" name="file1" dev="fuse" ino=3 res=0 errno=0 [ 403.431196][ T9926] gspca_ov534_9: Unknown sensor 0000 [ 403.431263][ T9926] ov534_9: probe of 7-1:0.0 failed with error -22 [ 403.497970][ T9926] usb 7-1: USB disconnect, device number 17 [ 403.801410][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 404.477867][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'. [ 404.499901][T10612] HTB: quantum of class 80060008 is small. Consider r2q change. [ 404.836722][T10618] tipc: Started in network mode [ 404.841899][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 404.869063][T10618] tipc: Node identity 8e4299de0dd5, cluster identity 4711 [ 404.877913][T10618] tipc: Enabled bearer , priority 0 [ 404.890764][T10619] device syzkaller0 entered promiscuous mode [ 404.926702][T10618] tipc: Resetting bearer [ 404.953355][T10617] tipc: Resetting bearer [ 405.010378][T10617] tipc: Disabling bearer [ 405.095378][T10621] loop6: detected capacity change from 0 to 4096 [ 405.193844][T10633] tipc: Enabling of bearer rejected, failed to enable media [ 405.247815][T10621] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 405.286278][T10621] ntfs3: loop6: Failed to load $Extend. [ 405.647681][T10648] tipc: Enabled bearer , priority 0 [ 405.806303][T10652] device syzkaller0 entered promiscuous mode [ 405.890303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 405.908936][T10646] tipc: Resetting bearer [ 406.015088][T10646] tipc: Disabling bearer [ 406.540765][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1772'. [ 406.930351][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 407.960373][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 409.000337][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 409.370212][ T5760] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 409.405178][T10723] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 409.490136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #288!!! [ 409.713512][T10723] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1786'. [ 409.987632][T10727] xt_hashlimit: size too large, truncated to 1048576 [ 410.040278][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 410.070271][ T5760] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.090364][ T5760] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.172575][ T5760] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.192997][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.207813][ T5760] usb 7-1: SerialNumber: syz [ 410.475613][ T5760] usb 7-1: 0:2 : does not exist [ 410.531321][ T5760] usb 7-1: USB disconnect, device number 18 [ 410.791220][T10532] udevd[10532]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.080338][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.200715][T10768] overlayfs: failed to clone lowerpath [ 411.691803][T10789] overlayfs: failed to clone upperpath [ 411.892885][T10798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1807'. [ 411.943625][T10798] unsupported nlmsg_type 40 [ 412.120266][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 413.160329][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 414.200299][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 415.240583][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 415.933381][T10887] xt_hashlimit: size too large, truncated to 1048576 [ 416.280303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 416.757111][T10928] netlink: 'syz.0.1848': attribute type 11 has an invalid length. [ 417.320327][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 418.360258][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 419.331352][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1863'. [ 419.400438][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 420.141688][T10989] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 420.440488][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 421.480527][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 421.771127][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 421.794934][T11029] device team1 entered promiscuous mode [ 421.807338][T11029] 8021q: adding VLAN 0 to HW filter on device team1 [ 421.835087][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 421.863655][T11029] device team2 entered promiscuous mode [ 421.869709][T11029] 8021q: adding VLAN 0 to HW filter on device team2 [ 422.520338][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 422.583953][T11053] xt_hashlimit: size too large, truncated to 1048576 [ 422.848646][T11063] loop6: detected capacity change from 0 to 64 [ 422.999738][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.040081][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.075543][T11067] hfs: request for non-existent node 131072 in B*Tree [ 423.104839][T11067] hfs: request for non-existent node 131072 in B*Tree [ 423.166724][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.194484][T11066] loop7: detected capacity change from 0 to 4096 [ 423.203605][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.229280][T11066] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 423.378109][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.410323][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.471208][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.478455][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.560326][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 423.695862][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.715406][T11063] hfs: request for non-existent node 131072 in B*Tree [ 423.740023][T11066] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 423.979072][T11066] ntfs3: loop7: Failed to load $Extend. [ 424.010710][T11063] hfs: request for non-existent node 12 in B*Tree [ 424.510211][T11063] hfs: request for non-existent node 12 in B*Tree [ 424.549357][T11066] ntfs3: loop7: MftZone: unavailable [ 424.600258][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 424.712502][T11066] ntfs3: loop7: MftZone: unavailable [ 425.413019][T11082] loop6: detected capacity change from 0 to 512 [ 425.434478][T11082] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 425.569443][T11082] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1902: invalid indirect mapped block 256 (level 2) [ 425.642739][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 425.663714][T11082] EXT4-fs (loop6): 2 truncates cleaned up [ 425.678489][T11082] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 426.007883][ T4381] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 1803188595: comm kworker/u4:8: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 426.078209][ T4381] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 426.100171][ T4381] EXT4-fs (loop6): This should not happen!! Data will be lost [ 426.100171][ T4381] [ 426.680273][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 426.864794][ T6878] EXT4-fs (loop6): Inode 15 (ffff888070251de8): i_reserved_data_blocks (1) not cleared! [ 427.720334][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 428.760294][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 429.800347][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 429.959844][T11149] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1925'. [ 430.136591][T11165] overlayfs: failed to clone upperpath [ 430.778440][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888062c96c00: rx timeout, send abort [ 430.791083][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888062c96c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 430.850266][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 431.506274][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 431.538491][T11205] device bond2 entered promiscuous mode [ 431.545914][T11205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.601838][T11209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.609623][T11209] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 431.630973][T11209] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 431.667542][T11205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.676201][T11205] IPv6: NLM_F_CREATE should be set when creating new route [ 431.683715][T11205] IPv6: NLM_F_CREATE should be set when creating new route [ 431.704263][T11205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.880445][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 431.947491][T11227] sctp: [Deprecated]: syz.4.1956 (pid 11227) Use of int in max_burst socket option deprecated. [ 431.947491][T11227] Use struct sctp_assoc_value instead [ 431.995718][T11224] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 432.010509][T11224] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 432.142027][T11235] kvm: apic: phys broadcast and lowest prio [ 432.173082][T11235] kvm: apic: phys broadcast and lowest prio [ 432.920283][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 433.474391][T11257] overlayfs: failed to clone upperpath [ 433.557932][T11263] kvm: pic: non byte read [ 433.570439][T11263] kvm: pic: non byte read [ 433.960336][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 435.000294][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 436.040526][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 436.624420][T11273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.080310][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 437.599868][T11273] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.609664][T11273] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.622812][T11273] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.633158][T11273] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.704963][T11273] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.714120][T11273] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.723341][T11273] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.732291][T11273] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.876224][T11294] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 437.912256][T11294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.999803][T11298] bond3: (slave veth7): Enslaving as an active interface with a down link [ 438.120482][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 438.599109][T11301] bond3: (slave veth9): Enslaving as an active interface with a down link [ 438.913126][T11313] device veth0_macvtap left promiscuous mode [ 439.160316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 439.422218][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 439.892624][T11355] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1998'. [ 439.927427][T11355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.960309][T11355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.980216][T11355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.009550][T11355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.203287][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 440.230763][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.237275][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.131950][T11384] overlayfs: failed to clone upperpath [ 441.240304][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 441.283191][T11394] overlayfs: failed to clone upperpath [ 441.332486][T11400] overlayfs: failed to clone upperpath [ 441.550696][ T4274] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 441.870471][ T4274] usb 7-1: Using ep0 maxpacket: 16 [ 441.990645][ T4274] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.072123][ T4274] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.280389][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 442.460314][ T4274] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.473171][ T4274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.481877][ T4274] usb 7-1: Product: syz [ 442.487014][ T4274] usb 7-1: Manufacturer: syz [ 442.493340][T11421] overlayfs: failed to clone upperpath [ 442.499865][ T4274] usb 7-1: SerialNumber: syz [ 442.841098][ T4274] usb 7-1: 0:2 : does not exist [ 442.879214][ T4274] usb 7-1: USB disconnect, device number 19 [ 443.163539][T11364] udevd[11364]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.320373][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 443.439343][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'. [ 443.514219][T11461] device bridge_slave_1 left promiscuous mode [ 443.553847][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.688061][T11461] device bridge_slave_0 left promiscuous mode [ 443.709490][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.949619][T11466] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 444.035933][T11468] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 444.088741][T11469] device veth3 entered promiscuous mode [ 444.156785][T11469] bond3: (slave veth3): Enslaving as an active interface with a down link [ 444.354947][T11471] bond3: (slave veth5): Enslaving as an active interface with a down link [ 444.364549][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 444.817574][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.826792][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.845534][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.855507][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.865409][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.875230][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.885368][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.895458][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.905402][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 444.915565][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 445.400337][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 446.440321][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 447.480270][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 447.806322][T11520] IPVS: Error connecting to the multicast addr [ 448.520375][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 449.358579][T11539] SET target dimension over the limit! [ 449.560357][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.600440][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.640346][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 452.680451][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 453.321759][T11605] __nla_validate_parse: 36 callbacks suppressed [ 453.321779][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 453.438712][T11600] SET target dimension over the limit! [ 453.720316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 454.881122][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.890243][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.901265][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.910483][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.919535][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.928628][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.937750][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.946939][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.956093][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 454.979000][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 456.040307][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 456.744971][T11667] bond0: option arp_all_targets: invalid value (18446744071564623876) [ 456.807528][T11669] SET target dimension over the limit! [ 457.080496][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 457.479177][T11693] tipc: Enabled bearer , priority 0 [ 457.502041][T11693] device syzkaller0 entered promiscuous mode [ 457.564121][T11693] tipc: Resetting bearer [ 457.624601][T11692] tipc: Resetting bearer [ 458.120365][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 458.601214][T11692] tipc: Disabling bearer [ 458.749177][ T4234] tipc: Node number set to 2207750622 [ 459.160303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 459.853055][T11730] xt_CONNSECMARK: invalid mode: 66 [ 460.200358][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 461.240367][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 462.280280][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 463.320294][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 463.414462][T11767] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 464.360269][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 465.400325][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 466.440248][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 466.651784][T11817] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 466.887991][T11822] netlink: 'syz.6.2129': attribute type 10 has an invalid length. [ 466.956393][T11822] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 467.007477][T11822] team0: Failed to send options change via netlink (err -105) [ 467.053884][T11822] team0: Port device netdevsim0 added [ 467.480364][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 468.120168][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 468.520272][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 469.560330][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 470.600256][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 471.336715][T11869] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 471.369065][T11869] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 471.640291][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 472.680254][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 473.566407][T11892] binder: BINDER_SET_CONTEXT_MGR already set [ 473.616750][T11892] binder: 11891:11892 ioctl 4018620d 200000004a80 returned -16 [ 473.720290][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 473.813029][T11902] __nla_validate_parse: 37 callbacks suppressed [ 473.813050][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 473.953968][T11902] bond2 (unregistering): Released all slaves [ 474.760258][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 475.480398][ T5760] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 475.743740][ T5760] usb 8-1: Using ep0 maxpacket: 16 [ 475.800295][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 476.690727][ T5760] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.712558][ T5760] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.840256][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 476.920654][ T5760] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.972781][ T5760] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.003865][ T5760] usb 8-1: Product: syz [ 477.008239][ T5760] usb 8-1: Manufacturer: syz [ 477.067543][ T5760] usb 8-1: SerialNumber: syz [ 477.570372][ T5760] usb 8-1: 0:2 : does not exist [ 477.637561][ T5760] usb 8-1: USB disconnect, device number 2 [ 477.880308][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 477.921667][T11856] udevd[11856]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.920260][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 479.468071][T12006] netlink: 798 bytes leftover after parsing attributes in process `syz.3.2188'. [ 479.960302][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 481.000255][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 481.011154][T12009] netlink: 'syz.7.2187': attribute type 1 has an invalid length. [ 481.136955][T12009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.188767][T12009] bond1: (slave ip6gretap1): making interface the new active one [ 481.205437][T12009] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 481.221078][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 481.582027][T12058] netlink: 'syz.0.2203': attribute type 11 has an invalid length. [ 482.040396][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.442648][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.727049][ T9261] [ 483.729447][ T9261] ============================================ [ 483.735619][ T9261] WARNING: possible recursive locking detected [ 483.741796][ T9261] syzkaller #0 Not tainted [ 483.746241][ T9261] -------------------------------------------- [ 483.752419][ T9261] kworker/u4:50/9261 is trying to acquire lock: [ 483.758716][ T9261] ffffe8ffffd4c968 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x574/0x980 [ 483.768411][ T9261] [ 483.768411][ T9261] but task is already holding lock: [ 483.775795][ T9261] ffffe8ffffc547e8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x3f1/0x980 [ 483.785055][ T9261] [ 483.785055][ T9261] other info that might help us debug this: [ 483.793132][ T9261] Possible unsafe locking scenario: [ 483.793132][ T9261] [ 483.800596][ T9261] CPU0 [ 483.803895][ T9261] ---- [ 483.807186][ T9261] lock(&pd_list->lock); [ 483.811519][ T9261] lock(&pd_list->lock); [ 483.815860][ T9261] [ 483.815860][ T9261] *** DEADLOCK *** [ 483.815860][ T9261] [ 483.824403][ T9261] May be due to missing lock nesting notation [ 483.824403][ T9261] [ 483.832739][ T9261] 3 locks held by kworker/u4:50/9261: [ 483.838139][ T9261] #0: ffff8881445ac938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 483.849452][ T9261] #1: ffffc90002fffd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 483.860598][ T9261] #2: ffffe8ffffc547e8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x3f1/0x980 [ 483.870284][ T9261] [ 483.870284][ T9261] stack backtrace: [ 483.876338][ T9261] CPU: 1 PID: 9261 Comm: kworker/u4:50 Not tainted syzkaller #0 [ 483.884154][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.894235][ T9261] Workqueue: pencrypt_parallel padata_parallel_worker [ 483.901389][ T9261] Call Trace: [ 483.904686][ T9261] [ 483.907752][ T9261] dump_stack_lvl+0x188/0x250 [ 483.912498][ T9261] ? show_regs_print_info+0x20/0x20 [ 483.917732][ T9261] ? load_image+0x410/0x410 [ 483.922545][ T9261] __lock_acquire+0x1247/0x7b50 [ 483.927616][ T9261] ? try_to_wake_up+0x3b8/0x1020 [ 483.932889][ T9261] ? __lock_acquire+0x7b50/0x7b50 [ 483.937937][ T9261] ? verify_lock_unused+0x140/0x140 [ 483.943163][ T9261] ? __queue_work+0x928/0xc80 [ 483.947862][ T9261] ? mark_lock+0x94/0x320 [ 483.952224][ T9261] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 483.958222][ T9261] lock_acquire+0x19e/0x400 [ 483.962788][ T9261] ? padata_do_serial+0x574/0x980 [ 483.967828][ T9261] ? queue_work_on+0x196/0x1f0 [ 483.972683][ T9261] ? read_lock_is_recursive+0x10/0x10 [ 483.978101][ T9261] ? wq_worker_last_func+0x40/0x40 [ 483.983309][ T9261] ? __rwlock_init+0x140/0x140 [ 483.988101][ T9261] _raw_spin_lock+0x2a/0x40 [ 483.992710][ T9261] ? padata_do_serial+0x574/0x980 [ 483.997925][ T9261] padata_do_serial+0x574/0x980 [ 484.002803][ T9261] padata_parallel_worker+0x5c/0x1a0 [ 484.008430][ T9261] process_one_work+0x867/0xff0 [ 484.013450][ T9261] ? worker_detach_from_pool+0x240/0x240 [ 484.019206][ T9261] ? lockdep_hardirqs_off+0x70/0x100 [ 484.024560][ T9261] ? _raw_spin_lock_irq+0xb7/0xf0 [ 484.029954][ T9261] ? _raw_spin_lock_irqsave+0x100/0x100 [ 484.035591][ T9261] ? wq_worker_running+0x97/0x170 [ 484.040642][ T9261] worker_thread+0xad7/0x12a0 [ 484.045406][ T9261] kthread+0x42e/0x520 [ 484.049507][ T9261] ? rcu_lock_release+0x20/0x20 [ 484.054361][ T9261] ? kthread_blkcg+0xd0/0xd0 [ 484.058967][ T9261] ret_from_fork+0x1f/0x30 [ 484.063449][ T9261] [ 484.537559][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 485.560352][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 486.600427][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 487.640322][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 488.680383][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 489.720353][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 490.760295][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 491.800378][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 492.840308][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available